Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
File: 10e25f26-1142-4a43-8091-69f9ddd435c1.roa (raw, json)
Hash identifier: gsNYuLAR8vDP2JG9JuV4nriVnTZPap5yrq1dkH/pxQQ=
Subject key identifier: 04:D8:F8:5A:E1:BC:E4:40:08:B1:48:6A:6E:38:F1:85:F4:32:DC:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2ACD2368B105B6E141086F92B04B6333336808F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
Signing time: Mon 26 Oct 2026 05:30:32 +0000
ROA not before: Mon 26 Oct 2026 05:30:32 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cd:23:68:b1:05:b6:e1:41:08:6f:92:b0:4b:63:33:33:68:08:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:32 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=3735c6fe480d6f14d168a611aaeae2e41cf4a137c983b1a49d4802857dbd5c35, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:67:d1:de:36:73:87:d4:9e:23:7b:65:be:
52:8e:99:0f:28:a7:e8:b6:a3:b1:b2:e6:dd:85:7b:
8f:a5:42:63:a1:4e:9c:e5:ae:d4:01:9d:7a:d5:11:
2d:92:f6:f4:3d:40:c0:1a:e0:ef:c7:af:97:c1:0c:
1b:68:5b:4c:7e:f3:79:93:17:07:0d:be:e3:c7:d2:
80:61:8f:2f:8b:0c:68:09:0f:34:17:b1:09:1e:7d:
34:ce:17:a5:2f:fe:27:d9:83:03:d3:34:6c:c9:60:
25:bd:13:87:35:f7:f9:a7:0f:e2:c4:5a:14:f4:da:
e4:d9:d7:f9:00:e1:f6:9a:32:27:da:64:9c:e9:e1:
20:14:a3:49:49:b3:70:45:b4:7b:6d:63:63:11:c1:
a4:d2:f5:fa:3d:ec:15:d1:1f:11:ee:ab:6e:ca:93:
2e:01:04:f6:2f:c4:7f:ed:63:04:ae:76:5e:a0:c2:
f9:57:32:b7:8a:9b:47:ac:56:a7:dd:f4:7f:bb:33:
71:56:13:e5:e7:73:22:c3:66:96:fe:b3:ea:02:69:
b6:ca:a5:6f:8f:34:ab:33:46:df:21:e0:60:21:33:
8c:40:d9:5c:a9:31:46:dc:04:ec:1d:7d:70:c4:6f:
0c:b5:57:8a:ba:e6:7c:27:8f:1b:7d:a8:d8:fa:8f:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:F8:5A:E1:BC:E4:40:08:B1:48:6A:6E:38:F1:85:F4:32:DC:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:1000::/40
Signature Algorithm: sha256WithRSAEncryption
84:69:fb:4e:8c:e1:1d:6e:e8:dd:70:3d:52:44:4b:f3:c5:cb:
8d:d1:d9:42:fb:2f:fb:ff:14:cc:28:2d:e1:9f:73:be:33:62:
fa:cf:a7:ac:03:47:6d:4c:bc:00:c1:65:0b:68:75:03:82:0a:
68:24:08:09:95:64:db:3e:35:6c:48:9d:f8:74:bd:56:3c:64:
7b:a5:8c:7b:00:a0:d0:f7:6b:24:e7:06:1e:c7:30:4e:f5:f6:
14:79:7a:7e:c6:99:d3:32:cc:6e:48:14:30:c4:f1:e2:e1:58:
a1:cc:78:90:b8:f7:f9:f1:26:58:44:d0:80:e9:b0:7f:1b:a2:
2d:e4:3d:94:0e:39:aa:5b:fa:1e:b1:3c:43:38:34:bd:9f:64:
a2:d0:65:cc:83:a2:8c:c1:b1:da:4c:b0:40:97:61:c3:ff:27:
c3:eb:f1:66:77:8f:8e:2b:1f:b8:12:6b:ea:c5:55:0c:07:eb:
b2:49:d7:89:55:8d:4b:c8:cd:36:5f:d1:53:9c:ff:64:8f:58:
75:48:25:c3:63:8d:02:00:b7:46:71:4b:a2:2e:c6:0c:4a:c5:
f4:eb:d5:0f:fd:99:a2:5b:f5:be:38:5b:8f:ee:1c:c5:91:fa:
ba:44:40:f8:6e:25:97:fe:1c:5e:ee:2b:19:a0:41:f1:d4:ef:
6c:75:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:00:18 2026 by rpki-client